3 ms·
> You can't throw away derived keys though! You can, AES-XTS does just this. Per-block keys can be derived on the fly from the root key and the block address.
by Nursie 4y ago
> You can't throw away derived keys though!
You can, AES-XTS does just this. Per-block keys can be derived on the fly from the root key and the block address. When the root key is gone, everything is gone.
- cryptonector 4y agoRight, but clearly I meant that you can't arrange to delete individual files and lose their derived keys. The reason is that the bits you need to derive the keys may still be somewhere on disk, and one could -having access to the root keys- find them and "undelete" and re-derive the keys and recover the file contents. Having to wipe an entire filesystem to securely delete a file is not useful.